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Abstract. For any elliptic curve E defined over the rationals with complex 
multiplication and for every prime p, we describe the image of the mod p 
Galois representation attached to E. We deduce information about the field 
of definition of torsion points of these curves, in particular we classify all cases 
where there are torsion points over Galois number fields not containing the 
field of definition of the CM. 



1. Introduction 

Elliptic curves defined over the rationals have been extensively studied for over a 
hundred years, mainly because we know that the set of rational points form a finitely 
generated abelian group. In this paper we are interested in giving a description of 
the possible finite groups that can be realized in this way. If we focus on the torsion 
subgroup, the problem is solved: we know every possible group that appear as the 
rational torsion subgroup of an elliptic curve over the rationals. 

However, when considering more general number fields, many questions about 
the torsion remain unsolved. Here we approach this problem from the following 
point of view: we are interested in studying how docs the torsion subgroup of an 
elliptic curve change when we enlarge the field of definition. As a first step of this 
project, we are going to consider elliptic curves defined over Q. 

The first results on this problem dealt with the case of quadratic number fields. 
For this case, Kwon [3] has given results allowing to compute the torsion subgroup 
over a quadratic field of an elliptic curve defined over the rationals that has all the 
2-torsion subgroup defined over the rationals. First Qiu and Zhang [4] and then 
completed by Fujita [5] have generalized Kwon's result to the case of polyquadratic 
number fields. 

We will focus on the complex multiplication (CM) case. We have proved results 
that give all the information about the field of definition of torsion points for CM 
elliptic curve defined over Q. In particular, we have classified all cases where there 
are torsion points over Galois number fields not containing the field of definition of 
the CM. We also give a description of the image of the Galois representations on 
the p-torsion of all these curves for every prime p. 

As it is well-known, the mod p Galois representations attached to an elliptic 
curve behave in two very different ways depending on whether or not the curve 
has CM. Contrary to what happens in the CM case, in the non-CM case Serre [5] 



Date: June 7, 2010. 

2000 Mathematics Subject Classification. Primary 11G05; Secondary 11F80. 
Key words and phrases. Elliptic curves, torsion, Galois representation. 

The authors were partially supported by the grants MTM2006-04895, MTM2009-07291 and 
CCG08-UAM/ESP-3906, and MTM2009-11068 respectively. 

1 



2 



L. DIEULEFAIT, E.GONZALEZ- JIMENEZ, AND J. JIMENEZ URROZ 



proved that the images of the mod p Galois representations are maximal, i.e., equal 
to GL2(F P ), for all but finitely many primes. 

Notation: 

— Let F be a number field, we will denote by Of the ring of integers of F. 

— Let p be an odd prime, we will denote by £ p a primitive p th -root of the unity 
and by Q + (( P ) the maximal real subficld of the p th -cyclotomic field Q(( p ), that 
is Q + (C P ) = Q(C P + Cp)- Note that V-P (respectively y/p) belongs to Q(( p ) if 
p = 3(mod4) (respectively p = l(mod4)). 

— Let E be an elliptic curve defined over F, the m-torsion subgroup of E(F) will 
be denoted by E(F)[m] = {P G E(F) \ [m]P = O} and by E[m] = E(F)[m}. 

— We will denote by F(E[m)) the number field obtained adjoining the coordinates 
of the points of order m. 

— Let p be a prime, we will denote by pE, P the mod p Galois representation attached 
to the p-torsion points of E. 

— x wm denote the mod p cyclotomic character, where the prime p will be clear 
by the context. 

— We will denote by j(E) the j-invariant of the elliptic curve E. 

Acknowledgement: We are grateful to John Cremona for useful comments at 
the beginning of this work. We also thank William Stein for computational facilities 
on the sage server. Finally, we thank the anonymous referee for useful comments. 

2. Elliptic curve with complex multiplication over Q 

It is well known that there are 13 isomorphic classes of elliptic curves defined 
over Q with CM (cf. pj A §3]). The following table gives a representative elliptic 
curve over Q for each class, that is, an elliptic curve over Q with CM by an order 
R = 7L + ]Ok of conductor f in a quadratic imaginary field K = Q(y/—D), where 
Ok is the ring of integer of K. We will denote by Edj this elliptic curve. 



-D 


f 


Short Weierstrass model of Edj 


-3 


1 


y' 2 = x s + 16 


-3 


2 


y 2 = x :i - I5x + 22 


-3 


3 


y 2 = x A - 480x + 4048 


-4 


1 


y 2 = x 6 + x 


-4 


2 


y 2 = x :i - llx + 14 


-7 


1 


y 2 = x A - 2835s - 71442 


-7 


2 


y 2 = x 3 - 595x + 5586 


-8 


1 


y 2 = x 3 - 4320a; + 96768 


-11 


1 


y 2 = x 3 - 9504a + 365904 


-19 


1 


y 2 = x A - 608a + 5776 


-43 


1 


y 2 = x A - 13760a + 621264 


-67 


1 


y 2 = x A - 117920a + 15585808 


-163 


1 


y 2 = x A - 34790720a + 78984748304 



Table 1 : Isomorphic classes of elliptic curves defined over Q with CM. 
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Let E be an elliptic curves defined over Q. We know that any E' /Q isomorphic 
to E over Q is in fact Q-isomorphic to a twist of E (cf. [6l X §5]). More precisely, 
let E : y 2 = x 3 + ax + b be a Weierstrass model for E, and E' a curve isomorphic 
to E. We will denote once and for all 

f 2 if j(E) ^0,1728, 
n(£)= < 4 if j(£) = 1728, 
[ 6 if j(£)=0. 

Then, E' = has a Weierstrass model of the form 

(i) E d : y 2 = x 3 + d 2 ax + d 3 b if j(E) ^ 0, 1728, 

(ii) E d :y 2 = x 3 + dax if j(J5) = 1728, 

(iii) E d :y 2 = x 3 + db if j{E) = 0, 

where d is an integer in Q* / (Q*) n ( E '> . In particular, any CM elliptic curve E defined 
over Q is in fact Q-isomorphic to a curve Efy j for some D,f as in Table 1, and d 
an integer in Q*/(Q*) n(E \ 

As we mentioned, in order to study the torsion of the elliptic curve, we will be 
using the mod p Galois representation of the elliptic curve, for any prime p. It 
is then important to note that, for j(E) ^ 0, 1728, if pe d ,,p is the representation 
associated to Ejja, then 

(!) p E% pV = PE D . f , P ®ip(d) 

is the twisted representation by the Lcgcndre symbol ip(d) = (fj- F° r the general 
case, we can look at the number of points of the reduced curve to get information 
about the trace of the Frobenius at p, a spliting prime in the CM field. It is well 
known that the following formula holds in general, 

where 7r is a primary prime above p and ip n (E)(') is the n(i?)-power residue symbol. 

3. Statements of the main results 

Theorem 1. (2-torsion) Let E be an elliptic curve defined over Q with CM by 
an order of K = Q(v— ~D) of conductor f and let F be a Galois number field not 
containing K , then 

• j(E) ^ 0,1728: 

- If D ^ 8 and f odd, then E(F)[2] = E(Q)[2}. 

— Otherwise, Q(E[2]) = Q{y/p) where p\D , in particular there are 2- 
torsion points in a quadratic field different from K. 

• j{E) = 1728: In this case, E = Ej A for d e Q*/(Q*) 4 and Q{E[2]) = 
Q(\/— ~d), in particular for rf 7^ 1 there are 2-torsion points in a quadratic 
field different from K. 

• j(E) = 0: In this case, E = E^ for d e Q*/(Q*) 6 and Q(E[2}) = 
Q(V^3, \/2d). Moreover, E(F)[2] = E(Q)[2\. 

Theorem 2. Let E be an elliptic curve defined over Q with CM by an order of 
K = Q(\/—D) and p an odd prime not dividing D. Let F be a Galois number field 
not containing K, then E(F)[p] is trivial. 
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Theorem 3. Let E be an elliptic curve defined over Q with CM by an order of 
K = Q(V — D) of conductor f. We know that E = E^ , for some integer d G 
Q*/(Q*)"(- E ' . Let p be an odd prime dividing D 

• Lf p > 7 then there are p-torsion points of E defined over Q(Cp + C P : yd). 
Furthermore, d = —p is the only case where any Galois number field con- 
taining p-torsion points contains K . 

• IfD = 7: 

— Case f = 1. There are 7 -torsion points of E defined over Q(C7 + 
£ 7 , \/—7d). Furthermore, d = 1 is the only case where any Galois 
number field containing 7 -torsion points contains K. 

— Case f = 2. There are 7 -torsion points of E defined over Q(C7 + 
C7,\/7d)- Furthermore, d = — 1 is the only case where any Galois 
number field containing 7 -torsion points contains K. 

. IfD = 3: 

— Case j = 1. Q(E{3]) = Q^ 1 / 6 , v^). There is a 3-torsion point in 
the field Q(\/d) and, except for d = —3, this quadratic field is different 
from K. Moreover, if d = e 3 ; there is a 3-torsion point on Q(v— 3e) 
which, except when e is a square, is different from K . 

— Case f 7^ 1. There are 3-torsion points in the field Q(v«)- Except for 
d = —3 this quadratic field is different from K . 

Remark: p = 3 is the only odd prime where there are p-torsion points defined 
over Q. For example in the last item of the previous theorem f = 1 with e = 1 or 
e = —3, when d = e 3 , and f ^ 1 with d = 1 are the only cases where the curve has 
rational 3-torsion. 

4. On the division polynomials for small or bad reduction primes 

In this section we are going to study the p-division polynomial of the elliptic 
curves -Eo,f, where p — 2, 3 or a bad reduction prime (i.e. p = D with 2, 3 \ D). 
This study has been done computing explicitly the factorization of the p-division 
polynomial for the 13 curves on the Table 1. 

Let E be an elliptic curve defined over a number field F given by a short Weies- 
trass equation of the form y 2 = x 3 +ax + b, where a,b £ Of- Define the m-division 
polynomial attached to E, recursively as follows: 

V>i = i, 

i'2 = 2y 

^ 3 = 3a; 4 + 6ax 2 + 12bx - a 2 , 

fa = {2x 6 + lOair 4 + 40bx 3 - 10a 2 a; 2 - 8bax - 2a 3 - 166 2 )* 2 
ip2k+l = i>k+2ipk - ipk-iipl+i, k>2 

^2fc = V'fc(V'fc+2V'fe_i - ^k~2^l +1 )/lp2, k>2. 

Now, for m > 2 define 

^ _ f ipm m odd 

m \ ipm /1P2 m even. 

and * 2 = x 3 + ax + b. We have <J? m <= O f [x]. Then P e E[m] if and only if 
^ m (x(P)) = 0. In particular, P e E(F)[m] if and only if * m (x(P)) = and 

P e E(F). 
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Remark: Let E be an elliptic curve denned over a number field F with j{E) ^ 
0, 1728 and E d its d-twist, for some d G F . Then it is a straightforward computation 
to check that ^ d n (dx) = d" e &* m \& m (a;), where * m (respectively \&^J denotes the 
m-division polynomial of E (respectively E d ). Therefore the study of the behavior 
of the roots of ^„(x) could be done on *5> m (x) instead. 

Let E be an elliptic curve defined over Q, pa prime and g(x) £ 1\x\ be a factor 
of the p-division polynomial of E. We denote by 

Q[E,g] = ®({a, (3 e Q \ (a, (3) e E[p] ,g(a) = 0}). 

Thus, Q(E[m]) = Q[E,V m ]. 

Lemma 4. Let —D £ {—7, —11, —19, —43, —67, —163} and E = Edj be an elliptic 
curve in the Table 1. Letp = D and ^ P {x) be the p- division polynomial of E. Then 
the irreducible factorization of^> p (x) over X[x] is given by 

( degg p = (p - l)/2 , 
%W = 9p{x)h p {x), where i deghp = p(j) _ i)/2 . 



Let us denote by F^ = Q({a e Q | g p (a) = 0}), then F p 
denote by F p = Q[E,g p ] then : 

(i) Ifp 7, then F p = F' p . Therefore, Q(( p ) = F p ( 

(ii) Ifp = 7 and f=l, then F 7 = Qfa). Thus, Q( A 
(hi) If p = 7 and f = 2, then F 7 = Q+(C7)(v / 7) 

Q(v^7)^^ 7 . 

Lemma 5. Let E = £x>.f be an elliptic curve in the Table 1, K = Q(y/—D) and 
let g{x) £ Z[x] be a non-linear irreducible factor of the 3-division polynomial of E. 
Then K(y/^3) C Q[E,g]. Furthermore: 

(i) IfD = 3 then Q(E Dff [3]) = K(^f). 

(ii) IfD^Z then #Gal(Q(^n lf [3])/Q) = 8 or 16. 

Lemma 6. Let E = Er),f be an elliptic curve in the Table 1 and K = <Q(y/—D), 
then: 

(i) If andj odd, then K C Q(E[2]). 

(ii) Otherwise, Q(E[2}) = Q(^/p) where p\D. 

Moreover, the following table shows Q(E[2]): 



"(Cp)- Moreover, if we 



r =p)=FL 



.y-D). 

-7) c F 7 . 
Thus, Q(C 7 ) + F 7 and 
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-D 


f 


Q(E Dff [2]) 


-3 


1 


K(V2) 


-3 


2 


Q(V3) 


-3 


3 




-4 


1 


K 


-4 


2 


Q(V2) 


-7 


1 


K 


-7 


2 


Q(V7) 


-8 


1 


Q(V2) 


-11 


1 


if(a) ; a a + a 2 + a- l = 


-19 


1 


if(a), a 3 - a 2 + 3a - 1 = 


-43 


1 


if(a); a ;i - 3a 2 + 7a - 1 = 


-67 


1 


if(a) ; a 3 - a 2 + 7a - 9 = 


-163 


1 


AT(a), a A - 9a 2 + 85a - 227 = 



The proof of the above lemmas is a straightforward computation, that has been 
done by using Magma and Sage (cf. respectively pQ, [8]). All the sources are available 
from http : / /www. uam. es/enrique . gonzalez . j imenez/research/tables/CM/ . 
Note that the case with more computer cost was the factorization of the 163-division 
polynomial of i?i63,i ■ This polynomial is of degree 13284 with huge coefficients. The 
file that stores it has size around 280 MB. Then the factorization was done using the 
functionality PARI on Sage. 

5. 2-TORSION 

Proof of Theorem [7J- Let E be an elliptic curve defined over Q with CM by 
an order R = Z + f Ok in a imaginary quadratic field K = Q(y/—D). Then if 
j(E) 7^ 0, 1728, E is Q-isomorphic to E^ * for some square free integer d. We have 
^2(dx) — d 3l $>2(x), where ^2 (respectively ^2) denotes the 2-division polynomial of 
E D ,f (respectively E^^). That is, if-E^j : y 2 = x 3 + ax+b then $> 2 {x) = x 3 + ax + b 
and v l , 2( a;: ) = x 3 + d 2 ax + d 3 b. Now, since the points of order 2 are the ones that 
have ordinate zero we have that the field of definition of a point of order 2 on Efy , 
is the same as the one on Er>^. Now, thanks to the Lemma [SJ we have that if F 
is a Galois field not containing K and D ^ 8 and f odd, then E(F)[2) does not 
increase with respect to the 2-torsion define d over Q. For the case D = 8 or f even 
we have that Q(E[2\) = Q( v /p) where p\D. 

Now let E be such that j(E) = 1728, then E = Ef^ : y 2 = x 3 + dx for some 
fourth powerfree integer d. Then it is trivial to realize that Q(E[2]) = Q(y/— d). 
The case j{E) = is similar to the above case. 

□ 

6. Primes not dividing the discriminant 

Theorem 7. Let E be an elliptic curve defined over Q with CM by an order of K = 
<Q(y/—D). Then, for every odd prime p\ D, the Galois representation corresponding 
to the p-torsion points of E is irreducible. 

Proof: Since E has CM, half of the traces of pe, p will be 0, more precisely, for 
every prime q inert on K and of good reduction, the trace a q = 0. 
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Suppose that pe, p is reducible. This means that, after semi-simplifying, we have 
PE,p = lii® A*2, with fii, fi2 characters. It is well-known that these characters 
will take values on F* (this follows from the fact that the Galois representations 
attached to an elliptic curve are odd). The determinant of pE, P is X, thus we can 
write p 2 = X ' lh ■ 

Thus pE.p is isomorphic to the sum of the two characters xPi 1 an d Pi- Compar- 
ing traces for the image of Frob q for any prime q inert in K and of good reduction 
for E we obtain: 

(2) a q = = qpiiqy 1 + pi(q) (mod p) . 

Since, by assumption, p is not ramified in K, if we fix a non-zero residue class t 
modulo p Cebotarev density theorem implies that there are infinitely many primes q 
that are inert in K and also congruent to t modulo p. We can also assume that these 
primes q are of good reduction for E. We fix the following residue class modulo 
p: take w to be any quadratic non-residue modulo p and let t = —w. Thus, there 
are infinitely many primes q inert in K, of good reduction for E, and congruent to 
t = —w modulo p. For these primes q congruence in ([2]) gives: 

w = -q = pi(q) 2 (modp). 

Since — q = w (mod p) which is a non-square this is a contradiction (recall that 
we know the character p\ to take values on F*). This proves the theorem. □ 

Proof of Theorem \Bj We have shown that the representation is irreducible. On 
the other hand, by the theory of complex multiplication the restriction to Gal(Q/ A') 
has abelian image. Therefore the image contains an abelian normal subgroup of 
index 2, it has a dihedral proyectivization like 

(CM- 

where the element T of order 2 comes from the conjugation a <G Gal (K/Q). Hence, 
for any field K C F C E\p], Gal (F/Q) will be a quotient of Gal (E[p]/Q) containing 
T and, in particular, again irreducible. The conclusion follows since it is obvious 
that a torsion point defined over F will produce a subspace invariant by Gal (F/Q) 
which would then give a reducible representation. □ 

The following proposition describes the image of the mod p Galois representation 
obtained in this section. 

Proposition 8. Let E be an elliptic curve defined over Q with CM by an order of 
K = Q(y/—D) and p an odd prime not dividing D. Then the proyectivization of 
PE,p has dihedral image. 

7. Primes dividing the discriminant 

Proof of Theorem^' We consider a curve E — £x>.f as in Table 1 and p = D > 3 
which is a bad reduction prime. We will use Lemma U together with the information 
that the curve has CM defined over K to give a precise description of the Galois 
number field generated by the p-torsion points of E. 

The image of pe, p is contained in GL^Fp) and since the curve has CM over K, it 
is well-known that the restriction to the Galois group of K is reducible since the 
p-torsion points generate an abelian extension of K . Thus, the image of pe, p is a 
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group containing an abelian normal subgroup with index at most 2. 
We know by Lemma |4] that the order of the Galois number field generated by the 
p-torsion of E is divisible by p (in fact, a factor h p of the p-division polynomial has 
degree divisible by p). This Galois number field is the one corresponding to the 
image of pe, p - If we apply Dickson's classification (cf. [5j Prop. 15]) of maximal 
subgroups of GLi2(Fp) we conclude that the representation is either reducible or 
surjective (we know that the determinant is surjective) . But since we also know that 
it contains an abelian normal subgroup of index at most 2 it has to be reducible. 
Since its order is divisible by p it is reducible but not decomposable. Thus, the 
image of pe, p can be described as follows: 

«> «--(*;) 

where * =^ and 4>i,4>2 are characters of Gal(Q/Q) satisfying 4>i ■ <f>2 = X- It is 
known that these two characters must have values in F*, because the representation 
pE,p is odd and therefore if it is reducible it must reduce over F p . In this case, 
precisely because the representation is reducible, either there are torsion points 
defined over Q (but it is well-known that there are no such points since p > 3) 
or there is a non-trivial Galois invariant 1-dimensional subspace, the character </>i 
corresponding to the action of Gal (Q/Q) on this subspace. In LemmaS]we observe 
that there is an abelian extension generated by some of the torsion points (the one 
corresponding to points of torsion whose x-coordinates are roots of g p ), this abelian 
extension must clearly correspond to the Galois invariant subspace with character 
<j}\. In Lemma |4] this is the extension that we have called F p . Then we can recover 
the character <p\ which corresponds to F p , and also cf>2 = X ' 4>i > i n each case. From 
Lemma |H the character <j>i is: 

if D = p > 7, prime: <j>i = x 2 ■ 
i£D = 7, f = l: 0i = X - 

if D = 7, f = 2: <j>i = [i,, where p corresponds to the extension Q(C7 + 
?7.V7). 

Let us now consider the case p — 3, f > 1 and E = E^t. These elliptic curves 
have rational 3-torsion points, and therefore the representation pe,3 is reducible as 
in (jj) with 4>i = 1 and 4>2 = X b u t> by Lemma pe,3 do not decompose as the sum 
of these two characters. For the general case of a CM curve E, we will use again 
the fact that E = Ejj ? and pe, p = Pe d f ,p <8 ip where ip is quadratic. Therefore we 
have for the image of pe, p that again it is contained in a Borel as in (j4]): 

(5) "»*={ 2 -^ ) 

where * 7^ 0. 

For p = 3, f = 1, we just have to consider the 3-division polynomial of E$ lt 
ip3{x) = 3x(x 3 + 2 6 d), to conclude that the coordinates of the 3-torsion points are 
(0, ±iVd), {Aad 1 ^, ±4V^3d), where a is any cubic root of —1. From here, Q and 
((S)), Theorem [3] follows easily . □ 

The description of the image of the mod p Galois representation just obtained 
can be summarized as follows: 
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Proposition 9. Let E = E^ ^ and p = D be a prime greater than 3. Then the 
image of pE.p is: 





<Pi ■ 4' 


* ) 


-( 





<t>2-V J 


X 


ifp = 


7 and f = 1 


(1 


ifP = 


7 and f = 2 


x 2 


ifp > 


7 



Pe, p 

where 



where \i corresponds to the extension Q(C7 + C7i 4>2 = X'4>\ 1 > V" * s ^ e quadratic 
character o/Q(v / d) cmd * 7^ 0. 
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